Privacy Policy
Privacy Policy
Last updated: April 9, 2026 · Official version is English. Translations are for convenience only.
1. Who We Are
Klyva AI LLC, a Utah Limited Liability Company (“Klyva,” “we,” “us”). Contact: privacy@klyva.ai
2. Data We Collect
Free Scan: Website URL submitted for scanning. No personal data required. No account creation.
Report/Blueprint purchase ($67/$297): Email address (for delivery), payment data processed by Stripe (we never see your full card number).
Done-For-You (+$300): Website login credentials (admin URL, username, password), business name, description, services, city, phone. Credentials are encrypted with AES-256-GCM before storage and purged within 30 days of project completion.
Analytics: PostHog collects anonymous usage data (pages viewed, features used). No personal identifiers. You can opt out via cookie preferences.
3. How We Use Your Data
- Deliver the service you purchased (scan, report, blueprint, DFY implementation)
- Send transactional emails (purchase confirmations, delivery notifications)
- Improve the product based on aggregate, anonymized usage patterns
- Comply with legal obligations
We do NOT sell, rent, or share your personal data with third parties for marketing purposes. Ever.
4. Subprocessors
| Service | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA |
| Supabase | Database (PostgreSQL) | USA (AWS us-west-2) |
| Vercel | Hosting | USA |
| Resend | Transactional email | USA |
| Anthropic | AI content generation (Blueprint) | USA |
| PostHog | Product analytics | USA |
| Upstash | Rate limiting (Redis) | USA |
5. Data Retention
- Free scan audits: 12 months
- Paid audits (Report/Blueprint): 3 years
- DFY credentials: until completion + 30 days, then purged
- Transactional email records: 24 months
- PostHog analytics events: 12 months
- Stripe payment records: 7 years (legal/tax requirement)
6. Your Rights
Depending on your jurisdiction (GDPR, CCPA, LGPD), you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Object to or restrict processing
- Data portability (receive your data in a structured format)
- Withdraw consent at any time
To exercise any of these rights, email privacy@klyva.ai. We respond within 30 days.
7. Cookies
We use essential cookies for site functionality and PostHog for analytics. PostHog cookies are loaded only with your consent. You can manage preferences at any time.
8. Security
We protect your data with: AES-256-GCM encryption for DFY credentials, TLS 1.3 for all connections, Row-Level Security on our database, rate limiting on all API endpoints, and Content Security Policy headers. For security concerns: security@klyva.ai
9. Changes
We may update this policy. Material changes will be communicated via email to customers with active purchases. The “last updated” date at the top reflects the most recent revision.
10. Contact
Klyva AI LLC
Utah, United States
team@klyva.ai